Secret Style Things-249-1-6-1651863112[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Secret Style Things-249-1-6-1651863112.zip
Size

2.0MB
MD5

9a6a5fec1a827fb0b8a7251de6dfdd9e
SHA1

50726cc1149df90126ca9bc99c4b8b8f31c39e6d
SHA256

878faa0c5501f740a811b4bea0ec74686e77a3b65fffc082746eaa29a25cf6a2
SHA512

a9341d1ed3747b57520559cb67c81438000b710e6fcf8ca66edc27f8fe7841b07e597f2bb17a514cb635b624799d4bc59c8e8c3a1c85921c3589e3efac02c7cf
SSDEEP

49152:iAEGE/jAO5mXqQpZtF58fPX8fY8Pc3zBA/yapa:iAaAO5tyrFOfPX8w8+ibpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Secret_Style_Things.dll

Files

Secret Style Things-249-1-6-1651863112.zip
.zip
Secret_Style_Things.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ